CVE-2019-17498: Integer Overflow
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-17498.
What is the severity of CVE-2019-17498?
The severity of CVE-2019-17498 is high with a severity value of 8.1.
Which software versions are affected by CVE-2019-17498?
Libssh2 versions up to and including 1.9.0 are affected by CVE-2019-17498.
How does this vulnerability work?
This vulnerability is caused by an integer overflow in the SSH_MSG_DISCONNECT logic, allowing an attacker to specify an arbitrary offset for a memory read.
What is the potential impact of CVE-2019-17498?
A crafted SSH server may be able to disclose sensitive information or cause a denial-of-service condition.